Andreas Steffen
7fe3ae88e4
handle default key sizes in openssl_crypter
2008-05-28 12:20:38 +00:00
Andreas Steffen
ed26207d08
fixed copy-and-paste error
2008-05-23 19:23:04 +00:00
Andreas Steffen
49b2395e3b
check if parsing of the RSA public key in an X.509 certificate was successful
2008-05-23 19:22:37 +00:00
Andreas Steffen
731ac6bf52
check if crypter is available in pem_to_bin()
2008-05-23 19:18:08 +00:00
Martin Willi
5e17e35c8d
fixed some compiler warnings
2008-05-23 15:49:43 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
eaa1399812
fixed the strongswan.conf path
2008-05-22 21:59:30 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Tobias Brunner
17188f20dd
Id and typo
2008-05-22 12:13:10 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Andreas Steffen
58ac5e2ff4
fixed segmentation fault caused by malformed attribute certificates
2008-05-21 22:53:45 +00:00
Martin Willi
4f23ec78d1
added more verbosity if signature hash OID is unknown
2008-05-21 13:01:58 +00:00
Andreas Steffen
49aeafc502
removed debug statement
2008-05-20 16:23:58 +00:00
Andreas Steffen
7f02156ebf
fixed whitespace eating in plugin loader
2008-05-20 15:03:15 +00:00
Andreas Steffen
367cc86f4a
added missing break in case statement
2008-05-19 20:10:26 +00:00
Tobias Brunner
081a14cd33
added an error message when strongswan.conf cannot be read
2008-05-19 13:20:33 +00:00
Tobias Brunner
550690d23b
fixed the cleanup code when the credential factory fails to create a builder
2008-05-19 12:43:01 +00:00
Martin Willi
0b0fba9e0d
fixed warning if plugin list has trailing whitespaces
2008-05-16 13:48:58 +00:00
Tobias Brunner
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
2008-05-16 13:27:21 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Tobias Brunner
84770ded1e
RSA with OpenSSL
2008-05-15 12:41:06 +00:00
Tobias Brunner
144274ab20
corrected deinitialisation of public key factory
2008-05-15 12:39:35 +00:00
Tobias Brunner
c1571b34fd
generic public key factory moved
2008-05-15 12:33:00 +00:00
Tobias Brunner
1d56d328fd
typo
2008-05-14 11:10:37 +00:00
Martin Willi
c0d1ebde71
fixed printing of %#H hosts
2008-05-14 06:34:54 +00:00
Martin Willi
f3884f6da6
reverted [3945], proper fix for zero value ASN1 integer
2008-05-13 14:15:12 +00:00
Martin Willi
7af8995cde
fixed unsave calculation of mpz_export length
2008-05-13 13:52:45 +00:00
Martin Willi
02ffd89642
decreased plugin load verbosity
2008-05-13 09:14:36 +00:00
Martin Willi
5dc317192a
support for left bounded padding in %H and %D
2008-05-09 12:25:39 +00:00
Martin Willi
e69f33f6e2
whitelisted gmtime_r
2008-05-09 12:24:11 +00:00
Martin Willi
9f9903a3b3
supporting width modifier in identification_t printf hook (e.g. %30D)
...
cleanups in host_t %H printf hook
2008-05-09 11:34:58 +00:00
Martin Willi
0f074a4344
implemented append mode for xcbc, testcase
2008-05-08 14:51:37 +00:00
Martin Willi
affd7a90ba
moved RAW public key support to a separate plugin (pubkey)
2008-05-08 13:16:42 +00:00
Martin Willi
240e727fde
renamed PRF_AES128_CBC to PRF_AES128_XCBC
2008-05-08 12:43:27 +00:00
Martin Willi
25b12c696b
replaced --with-gid/uid by --with-group/user
...
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi
f8277a8370
added configure check and support for sqlite3 libraries without sqlite3_prepare_v2
2008-05-07 14:41:13 +00:00
Martin Willi
4ce78f9356
fixed 3DES encryption
2008-05-07 11:54:30 +00:00
Martin Willi
86ab5636c2
support for @#hex ID_KEY_ID identification_t
2008-05-06 13:45:14 +00:00
Martin Willi
c963c4bc15
fixed parsing of openssl format public keys
2008-05-06 12:56:36 +00:00
Martin Willi
cc0cb93553
printf "width" support for hosts (e.g. %15H)
2008-05-05 08:31:43 +00:00
Martin Willi
6c90949f18
resetting old scheduling policy correctly in free() hook
2008-05-05 07:40:21 +00:00
Martin Willi
27d04e055d
implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
...
supporting ike=...-aesxcbc-... in ipsec.conf
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi
f5475fa440
crypter_t api supports in-place encryption using NULL as output parameter
2008-04-30 14:02:25 +00:00
Tobias Brunner
d691080cfc
simplified the OpenSSL crypter a bit
2008-04-30 09:24:22 +00:00
Tobias Brunner
87aa386df1
simplified the OpenSSL hasher a bit
2008-04-30 09:23:13 +00:00
Tobias Brunner
bc75840fb1
OpenSSL hasher does not need an internal buffer anymore
2008-04-30 08:54:36 +00:00
Tobias Brunner
ae7e837c30
adding diffie hellman with OpenSSL
2008-04-29 15:42:34 +00:00
Tobias Brunner
4eda3aa223
use SHA-1 as preferred hasher in the OpenSSL plugin
2008-04-29 09:13:14 +00:00